Messages in this thread | | | Subject | Re: [PATCH v5 0/7] eCryptfs: added support for the encrypted key type | From | lkml@serverph ... | Date | Fri, 14 Dec 2012 13:00:33 +0100 (CET) |
| |
Hi there,
Either this is completely braindead, or I'm missing something very obvious. Why mess up encrypted keys with various "format" fixes. I hope this doesn't start a trend.
The right (and disturbingly simpler) approach to fixing the auth_token vs. raw key material issue would be to put the fix in eCryptfs.
In fact, all the relevant bits for filling the token from the key_desc/sig should be moved from security/keys/encrypted/ecryptfs_format.c to fs/ecryptfs/ecryptfs_kernel.h, and all the format cruft in encrypted-keys reverted. Then pretty much any "default" encrypted key could be used for ecryptfs…
What am I missing?
--@;
--- posted at http://www.serverphorums.com http://www.serverphorums.com/read.php?12,341340,618745#msg-618745
| |